Actively exploited · Published Aug 15, 2015 · Assigned by microsoft

CVE-2015-1769

Medium 6.6 Exploited

In plain English

A medium-severity security flaw in Windows from Microsoft. Attackers are actively exploiting it in the wild (listed by CISA on May 25, 2022). The chance it is exploited in the next 30 days is estimated at 4.1% (higher than 91% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Apply updates per vendor instructions.

Severity (CVSS 3.1)6.6Medium

Exploit odds (30 days)4.1%top 9.2% of all CVEs

Exploited in the wildYesCISA KEV since May 25, 2022

Attack tooling1Public PoC

CISA guidance

Apply updates per vendor instructions.

Federal agencies must remediate by Jun 15, 2022.

Official description

Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 mishandles symlinks, which allows physically proximate attackers to execute arbitrary code by connecting a crafted USB device, aka "Mount Manager Elevation of Privilege Vulnerability."

Affected products (as reported)

Vendor	Product	Versions
n/a	n/a	n/a

References

http://blogs.technet.com/b/srd/archive/2015/08/11/defending-against-cve-2015-1769-a-logical-issue-exploited-via-a-malicious-usb-stick.aspx x_refsource_CONFIRM
MS15-085 vendor-advisory, x_refsource_MS
1033244 vdb-entry, x_refsource_SECTRACK
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-1769 government-resource